Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e20323135333034.roa
File: 38322e3133392e3233372e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: H29tCWd9HCuSb67iB6jVB/HWfJxMazRTKw7zKszO/eg=
Subject key identifier: AD:BE:D0:D3:48:96:BD:A2:37:6A:31:6F:E4:18:57:B0:AD:FB:36:22
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 30613CF500E0B441C10995129516E53F3A68CD9C
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e20323135333034.roa
Signing time: Thu 04 Sep 2025 10:40:05 +0000
ROA not before: Thu 04 Sep 2025 10:35:05 +0000
ROA not after: Thu 03 Sep 2026 10:40:05 +0000
asID: 215304
IP address blocks: 82.139.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:61:3c:f5:00:e0:b4:41:c1:09:95:12:95:16:e5:3f:3a:68:cd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:05 2025 GMT
Not After : Sep 3 10:40:05 2026 GMT
Subject: CN=ADBED0D34896BDA2376A316FE41857B0ADFB3622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:25:38:e6:fe:40:aa:f4:c7:72:c0:21:39:
bd:d4:9a:11:b8:cb:57:0f:7a:d3:77:2a:67:b0:2b:
51:75:aa:eb:d8:da:1b:46:12:06:9b:80:02:c7:37:
a1:29:6e:a1:60:70:1f:ff:5d:13:36:b7:57:84:06:
7d:04:b4:26:dd:cb:2c:cd:65:a3:39:61:04:3f:3b:
92:40:6f:33:bd:09:20:bd:c2:83:9b:de:e3:0b:20:
3e:78:15:34:fd:a8:3a:1d:9c:d6:b9:bc:a1:d1:6d:
c6:6e:c8:74:30:99:b3:aa:08:01:2f:ba:dc:10:29:
00:a0:85:5a:fb:96:4f:08:99:d5:4a:bb:4d:83:18:
2e:06:b5:f2:53:1e:6f:66:2f:71:a3:6d:9e:b4:8f:
e9:a9:e1:23:c0:d2:28:0c:2c:d2:c5:56:ad:cf:e3:
3b:ac:7c:4c:bb:e3:46:10:1b:e6:a3:54:e5:73:70:
78:09:49:50:f3:70:59:26:09:c5:eb:6a:2e:b6:8a:
cb:7e:c9:fe:c6:98:52:2a:15:38:56:79:2b:af:d0:
67:db:10:44:f3:05:d6:44:61:1a:99:b0:31:7a:ad:
aa:72:85:2c:23:13:4f:a7:67:47:ac:98:96:b7:75:
e7:cb:90:3b:37:b0:92:8b:d7:23:d6:b5:63:86:d0:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:D0:D3:48:96:BD:A2:37:6A:31:6F:E4:18:57:B0:AD:FB:36:22
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:78:42:55:62:50:52:5c:bc:05:46:01:86:dc:b5:3c:ed:86:
57:b8:03:2f:84:72:6c:45:eb:d5:65:8c:a7:27:a9:1f:27:35:
c7:12:35:89:ab:e6:52:fd:0d:b0:0d:4b:20:16:5d:65:77:c6:
9f:80:13:25:62:77:78:27:02:26:e7:81:ac:f6:6f:bb:06:c7:
18:07:0b:ed:4d:7b:09:65:f4:31:99:3c:90:71:f9:fa:99:8f:
0b:ed:1a:79:60:a9:5a:e4:4e:8d:9d:9e:a2:0f:22:67:26:ce:
d9:62:3d:6f:10:61:96:5b:58:c6:da:b0:e1:ea:51:0d:df:9a:
c7:e4:ac:78:60:3b:05:c4:7c:0a:ce:6f:b9:65:88:79:fe:cf:
3d:62:a9:25:37:07:df:93:28:11:1d:28:a8:bc:1a:55:21:21:
72:e1:91:4d:28:0d:ed:cb:f9:6a:11:2c:af:c4:bd:d7:f9:c8:
0b:10:77:cb:77:60:10:d6:07:8d:10:da:5e:b2:88:bd:2b:4d:
e0:b9:a7:3f:2e:b9:f6:9e:50:86:df:21:e4:e7:dd:f2:1f:49:
02:d2:f3:f1:90:a3:77:02:f0:f4:46:85:ba:2e:2d:04:7e:c7:
0a:5e:af:ec:29:f7:ac:9d:41:15:1a:af:8b:e6:b3:4b:c0:ea:
8c:ce:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:23 2025 by rpki-client